add checks for incoming ip filtering